A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

Enables enterprises to build AI-powered travel & expense experiences through a single secure gateway to a connected, ...

CVE-2026-41679, a critical vulnerability in Paperclip, allowed attackers to gain administrative privileges and code execution ...

To minimize the exposure of company data, AI agents start out with no permissions to access or share resources and must request them through the Cloudflare OS platform. Server cod ...

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track ...

Enhanced capabilities help wholesale teams sell faster and more accurately across trade counters, field sales, trade ...

A leaked n8n API key is only the start. GitGuardian's research traces the full chain, from exposed tokens and weak keys to ...

A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.

BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...

Convex is not the only application backend on the market. According to the company, one of its platform’s main ...

SaaS platforms, CRM and ERP systems, and collaboration tools have made the browser the primary gateway, and often the central ...